Changeset 116335 in webkit


Ignore:
Timestamp:
May 7, 2012 12:01:31 PM (12 years ago)
Author:
abarth@webkit.org
Message:

Test the combination of CSP and srcdoc
​https://bugs.webkit.org/show_bug.cgi?id=85778

Reviewed by Eric Seidel.

This test ensure that <iframe srcdoc> can't be used to bypass
Content-Security-Policy restrictions on script-src. We already have the
correct behavior. This test just verifies it.

  • http/tests/security/contentSecurityPolicy/srcdoc-doesnt-bypass-script-src-expected.txt: Added.
  • http/tests/security/contentSecurityPolicy/srcdoc-doesnt-bypass-script-src.html: Added.
Location:
trunk/LayoutTests
Files:
2 added
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/LayoutTests/ChangeLog

    r116331 r116335  
     12012-05-07  Adam Barth  <abarth@webkit.org>
     2
     3        Test the combination of CSP and srcdoc
     4        https://bugs.webkit.org/show_bug.cgi?id=85778
     5
     6        Reviewed by Eric Seidel.
     7
     8        This test ensure that <iframe srcdoc> can't be used to bypass
     9        Content-Security-Policy restrictions on script-src. We already have the
     10        correct behavior. This test just verifies it.
     11
     12        * http/tests/security/contentSecurityPolicy/srcdoc-doesnt-bypass-script-src-expected.txt: Added.
     13        * http/tests/security/contentSecurityPolicy/srcdoc-doesnt-bypass-script-src.html: Added.
     14
    1152012-05-07  Pravin D  <pravind.2k4@gmail.com>
    216
Note: See TracChangeset for help on using the changeset viewer.